Behavioral task
behavioral1
Sample
RFQ AE 3003910999.jar
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
RFQ AE 3003910999.jar
Resource
win10v2004-20241007-en
windows10-2004-x64
8 signatures
150 seconds
General
-
Target
RFQ AE 3003910999.jar
-
Size
264KB
-
MD5
28ec6971f041bf8032f0cf107a4b998a
-
SHA1
26521b13ff600ba008eb4cd29793e4eff19b4a0d
-
SHA256
8a70ea299b970caec8bb342c024f36b731c315907797879c0b8d0385610aca78
-
SHA512
f510617be9820f58d3104866234057bcac17509c31ff0a52361eb2737d1cc8bc2b4a427c6bc948d3009432228ca7788a2ee5eb8204fa19221c33383bb5e9a71c
-
SSDEEP
3072:+XfNv33luMlRapi+5MNlHAi7WlyUkg2Ac3B2At6L4g7f8TlD0e05fpo8RHCUUNmM:+FvFuMioq7uO6WfClDrojHCNmM
Score
10/10
Malware Config
Extracted
Family
strrat
C2
badmiles.ddns.net:5055
Attributes
-
license_id
4OI0-V4TA-Z8G4-WQF1-B9VH
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Signatures
-
Strrat family
Files
-
RFQ AE 3003910999.jar.jar